Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/Z1i07bzmd77SdCJmTgg7zbOg3b4.roa
File: Z1i07bzmd77SdCJmTgg7zbOg3b4.roa (raw, json)
Hash identifier: E9EJjES5WtiWFCDexLNwPr6HJ9Z6E1jJFk5I79s8pzM=
Subject key identifier: 67:58:B4:ED:BC:E6:77:BE:D2:74:22:66:4E:08:3B:CD:B3:A0:DD:BE
Certificate issuer: /CN=210f7948f5e7dccbb62ba8f53c35ba5525631b70
Certificate serial: 018CC64AD2887C1E28074A39519057349B8F
Authority key identifier: 21:0F:79:48:F5:E7:DC:CB:B6:2B:A8:F5:3C:35:BA:55:25:63:1B:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/Z1i07bzmd77SdCJmTgg7zbOg3b4.roa
Signing time: Mon 01 Jan 2024 18:30:41 +0000
ROA not before: Mon 01 Jan 2024 18:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196816
IP address blocks: 2a0f:1100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:d2:88:7c:1e:28:07:4a:39:51:90:57:34:9b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210f7948f5e7dccbb62ba8f53c35ba5525631b70
Validity
Not Before: Jan 1 18:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6758b4edbce677bed27422664e083bcdb3a0ddbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:44:bb:33:05:94:9d:d5:3f:e5:8f:cd:d7:
f6:86:7e:74:16:04:97:24:6b:c8:f7:ba:ed:df:4c:
f3:68:6c:7f:77:9a:7c:3d:91:42:cd:8d:ca:ae:ca:
66:47:0b:59:34:33:74:34:8a:68:cc:7c:bd:be:ab:
52:38:94:67:1d:19:57:a9:68:f1:c3:39:69:bd:56:
34:a5:47:12:b5:c7:80:d6:b6:d8:2b:b8:32:46:5b:
77:9e:e0:32:97:d4:4e:62:d5:6d:3e:a9:a5:d8:aa:
e7:4e:bf:3e:4a:62:4f:1f:f2:fe:6d:f3:ad:d3:07:
dd:7a:f0:e0:7d:ba:1f:2b:c9:2f:db:47:3c:71:57:
e4:7a:e2:95:c5:83:32:77:ea:cd:64:14:ab:8f:b8:
20:71:d5:3f:8f:48:b5:93:1a:3e:1d:b5:51:b7:35:
dd:ae:28:18:7e:63:f0:a2:fc:61:cb:e5:06:ce:aa:
8e:7a:0f:f9:37:66:24:62:07:38:34:24:4a:66:01:
af:cb:57:2b:5d:6e:71:65:2c:38:34:dc:7d:17:05:
2a:1c:ae:68:d9:ea:bd:6a:b3:67:d0:d1:fc:0d:80:
72:de:7d:14:35:c5:ce:c2:13:0b:44:be:e3:e1:62:
f6:04:ab:8d:35:d6:7c:c0:4c:41:fd:d5:f4:3a:eb:
ba:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:58:B4:ED:BC:E6:77:BE:D2:74:22:66:4E:08:3B:CD:B3:A0:DD:BE
X509v3 Authority Key Identifier:
keyid:21:0F:79:48:F5:E7:DC:CB:B6:2B:A8:F5:3C:35:BA:55:25:63:1B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/Z1i07bzmd77SdCJmTgg7zbOg3b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1100::/29
Signature Algorithm: sha256WithRSAEncryption
a7:4f:92:39:3e:ff:31:5c:da:bc:8c:e8:6d:6c:17:2a:98:7d:
f1:3d:c7:be:71:75:12:db:8b:b9:73:23:50:a3:af:04:70:5d:
69:f7:71:4b:3d:72:7f:0d:72:d1:71:91:60:5b:eb:bc:31:40:
16:18:2c:ce:06:c9:91:26:05:43:00:e0:06:08:b9:e0:9f:cb:
bc:3d:1d:d8:38:c7:6d:f1:7e:a7:f0:fd:41:3f:8d:54:55:58:
3b:2f:a8:a3:10:5f:47:53:ec:18:d3:85:ce:92:02:f1:cc:a0:
e9:42:1c:83:e2:9c:de:64:ac:64:08:8b:0f:20:c6:a0:ad:b0:
6d:a7:1b:2f:e6:18:a8:2d:05:71:3f:4a:c0:83:9f:4d:69:bf:
8a:ea:14:77:4a:b9:40:6d:2e:11:b4:d2:cf:da:9f:06:65:fd:
44:2f:72:09:ba:85:21:1e:50:26:ff:69:3b:13:b3:b4:13:f5:
d2:26:d1:a9:48:fb:4b:0c:78:25:31:07:7c:30:f0:ba:58:b6:
97:5e:75:d1:e7:1d:3a:c2:10:8e:37:f7:a8:1b:4c:71:bb:b1:
39:58:c3:79:bc:55:4b:c6:f5:36:fb:73:e2:2d:3b:72:fa:ae:
e5:fc:1d:63:00:fe:37:e2:c4:e6:a0:6b:9f:1c:62:7b:e1:46:
88:02:ba:4d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzGStKIfB4oB0o5UZBXNJuPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMGY3OTQ4ZjVlN2RjY2JiNjJiYThmNTNjMzViYTU1MjU2
MzFiNzAwHhcNMjQwMTAxMTgzMDQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzU4YjRlZGJjZTY3N2JlZDI3NDIyNjY0ZTA4M2JjZGIzYTBkZGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCBEuzMFlJ3VP+WPzdf2hn50FgSX
JGvI97rt30zzaGx/d5p8PZFCzY3KrspmRwtZNDN0NIpozHy9vqtSOJRnHRlXqWjx
wzlpvVY0pUcStceA1rbYK7gyRlt3nuAyl9ROYtVtPqml2KrnTr8+SmJPH/L+bfOt
0wfdevDgfbofK8kv20c8cVfkeuKVxYMyd+rNZBSrj7ggcdU/j0i1kxo+HbVRtzXd
rigYfmPwovxhy+UGzqqOeg/5N2YkYgc4NCRKZgGvy1crXW5xZSw4NNx9FwUqHK5o
2eq9arNn0NH8DYBy3n0UNcXOwhMLRL7j4WL2BKuNNdZ8wExB/dX0Ouu6VQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGdYtO285ne+0nQiZk4IO82zoN2+MB8GA1UdIwQY
MBaAFCEPeUj159zLtiuo9Tw1ulUlYxtwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVE5NVNQWG4zTXUySzZqMVBEVzZWU1ZqRzNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lNGE3YWMtMWI1Yi00YmFjLTg1NTct
NjNmNjIwMmU0YmY0LzEvWjFpMDdiem1kNzdTZENKbVRnZzd6Yk9nM2I0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lNGE3YWMtMWI1Yi00YmFjLTg1NTctNjNmNjIwMmU0YmY0
LzEvSVE5NVNQWG4zTXUySzZqMVBEVzZWU1ZqRzNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg8RADAN
BgkqhkiG9w0BAQsFAAOCAQEAp0+SOT7/MVzavIzobWwXKph98T3HvnF1EtuLuXMj
UKOvBHBdafdxSz1yfw1y0XGRYFvrvDFAFhgszgbJkSYFQwDgBgi54J/LvD0d2DjH
bfF+p/D9QT+NVFVYOy+ooxBfR1PsGNOFzpIC8cyg6UIcg+Kc3mSsZAiLDyDGoK2w
bacbL+YYqC0FcT9KwIOfTWm/iuoUd0q5QG0uEbTSz9qfBmX9RC9yCbqFIR5QJv9p
OxOztBP10ibRqUj7Swx4JTEHfDDwuli2l1510ecdOsIQjjf3qBtMcbuxOVjDebxV
S8b1Nvtz4i07cvqu5fwdYwD+N+LE5qBrnxxie+FGiAK6TQ==
-----END CERTIFICATE-----
Generated at Mon Apr 29 11:39:18 2024 by rpki-client on console-ams.rpki-client.org